🚀 go-pugleaf

On 14 Jun 1999 07:07, Paul Colquhoun <postmaster@andor.dropbear.id.au> wrote:
>
>
>Most of this security stuff was the default in RH5.2 as well. Are
>you sure you don't remember turning it off?
>
>The telnet-as-root "problem" can be fixed by editing /etc/securetty
>and adding some entries that correspond to telnet sessions, i.e.
>pts/0
>pts/1
>etc...
>
>/etc/securetty contains the list of terminals ( this includes
>the virtual consoles and telnet pseudottys ) that are concidered
>secure enough for root to use.
>
>Every telnet session will use a pseudotty, and will be allocated
>the smalles available number ( I think ). If you incude pts/0 and pts/1
>then root can telnet directly into the box, provided that one
>or the other of these pttys are free. You may need to add a few
>pts/? entries if you want many simultaneous sesions.
>
Or, if you don't want to be limited to just a few ttys (although I think
limiting to none is a better idea!), you can just delete the file
/etc/securettys and that will disable that check and root can login from
anywhere.

OBDisclaimer:  Doing this is really not a good idea.  You're going to telnet
               into your box and send your root password as clear text for
               anybody to sniff.   Take a look at ssh and sudo!

-- 
--Tracy S. Fitch
Theatre Technical Director/Lighting Designer
Unix SysAdmin